ServiceNow Performance Analytics for ITSM KPIs and Metrics That Matter
Defining and Measuring Key Performance Indicators
Choosing indicators for Performance Analytics in ITSM comes down to a few decisions: which measures reflect your priorities (speed, effectiveness or quality), how each one is calculated and from which tables, and how to stop the figures being misused to rank teams or punish them. The sections below work through those decisions, the misuse patterns to watch, a selection worksheet and the signs that a measure has stopped doing its job.
Key indicators for incident management might include: time to first response, mean time to resolution, first-contact resolution rate, and repeat incident rate. Different indicators emphasise different values: response time emphasises speed, first-contact resolution emphasises effectiveness, repeat rate emphasises quality. Organisations should select metrics that reflect their priorities.
How Metrics Are Calculated and Data Sources
Each metric must be calculated consistently. How is mean time to resolution calculated? Is it from creation to closure? Or from assignment to closure? Are paused incidents excluded? The definition determines what the metric actually measures. Data sources matter too: are values pulled from ServiceNow tables, calculated from related tables, or entered manually? Consistency in calculation ensures that trends are meaningful.
Data quality affects metric reliability. If incident records are not properly closed, closure time metrics will be distorted. If assignment records are incomplete, assignment metrics will be wrong. Organisations should regularly validate that data quality is sufficient for reliable metrics.
Typical Misuse of ITSM Metrics
A common misuse is using metrics to compare teams without accounting for differences in workload or complexity. One team might have longer resolution times because they handle more complex incidents. Using resolution time to conclude that one team is worse than another without understanding context leads to wrong conclusions.
Another misuse is using metrics to punish teams rather than improve performance. Metrics should help organisations understand what is happening and where to improve. Using metrics punitively causes teams to game the numbers rather than improve the underlying process.
Another misuse is tracking too many metrics. Organisations become overwhelmed with metrics and lose sight of what actually matters. Focusing on a few key metrics that drive important outcomes is more effective than tracking dozens of metrics.
Review Cadence and Continuous Improvement
Metrics should be reviewed regularly, typically monthly or quarterly. Review should examine trends: is performance improving or declining? Is the trend expected or does it require investigation? Review should inform decisions: where should improvement efforts focus? What resources should be allocated? Regular review keeps metrics tied to actions rather than just reporting numbers.
Data Quality and Metric Integrity
Metrics are only as good as the data underlying them. Organisations should regularly audit data quality: are records being created completely and accurately? Are fields being updated when status changes? Are records being closed properly? Regular data quality audits ensure that metrics remain reliable.
Actionable Metrics vs Vanity Metrics
Some metrics look impressive but do not drive action. A metric showing total incidents resolved might be meaningless if teams are closing incidents without solving the underlying problems. A metric showing staff overtime might be interesting but not actionable if managers do not understand what causes overtime spikes. Actionable metrics drive specific, measurable improvements.
Good metrics should answer business questions. Are customers satisfied? Are critical services reliable? Are teams working efficiently? Are repeat problems occurring? Metrics should connect to what matters for business success.
Balanced Scorecards and Multiple Dimensions
Organisations should track metrics across multiple dimensions. Quality metrics alongside efficiency metrics. Customer satisfaction alongside operational costs. Speed alongside accuracy. Balanced scorecards prevent organisations from optimizing for one metric at the expense of others. A team that resolves incidents quickly but leaves behind repeat problems has optimized the wrong metric.
Comparative Analysis and Trend Tracking
Metrics become more meaningful when tracked over time. Is performance improving, declining, or stable? Trends reveal patterns that single snapshots do not show. Comparative analysis between teams should account for context: teams handling different types of work might have different metrics. Understanding context prevents drawing wrong conclusions from metric comparisons.
The guides in this section explore how organisations define, calculate, track, and use ITSM metrics effectively to drive continuous improvement.
A selection worksheet for ITSM indicators
Choosing ITSM indicators is easier when each candidate has to justify itself against the same questions. For every measure you are considering, write down the decision it would inform, the person who can act on it, the direction that counts as better, and the way a team could make the number look better without improving the service. A measure that cannot pass those four tests can mislead more often than it informs, however cleanly it can be calculated.
The worksheet below applies that test to measures commonly used in incident, change and request work. Teams often leave the final column empty, and it matters most when a number starts to move for the wrong reasons.
| Candidate measure | Decision it supports | Who can act on it | How it can be gamed |
|---|---|---|---|
| Median time to resolve standard incidents | Whether routine work is flowing through the desk | Service desk lead | Closing records before the fix is confirmed |
| Share of incidents resolved on first contact | Whether the desk has the knowledge and access it needs | Service desk lead, knowledge owner | Transferring records to avoid being the owner |
| Reopen rate after closure | Whether closure means the problem is solved | Quality lead, team leads | Opening a new linked record instead of reopening |
| Age profile of open work | Where the backlog is aging and who needs help | Queue owner | Moving records to a pending state that the age measure ignores |
| Share of repeat incidents on the same configuration item | Whether a problem record should exist | Problem manager | Recategorizing repeats so they look unrelated |
| Change success without emergency fixes | Whether planning and testing are holding | Change manager | Labeling emergency work as standard to keep the rate high |
None of these measures is wrong to track. The table is there to show that each has a specific use and a specific failure, and that the two are usually discovered in the same place.
Why the average hides the problem you are looking for
The mean time to resolve is a common headline figure, and it can mislead. A small number of very long records can pull the average far from the experience of a typical customer, while a handful of very quick closures can pull it down. For many operational decisions the distribution is more useful than the mean. Show the median, a high percentile and the count of records beyond a chosen age, so the team can see whether the work is uniformly slow or whether a tail of difficult records is driving the number.
The same caution applies to percentage measures. A rate built on a small monthly count will move sharply with one record. Show the count beside the rate, so a reader can tell a real change from a single unusual week.
Building a KPI set in a sensible order
- List the service outcomes the business cares about, in its own words, before naming any measure.
- For each outcome, pick one speed measure and one quality measure, so that neither can be improved at the cost of the other without someone noticing.
- Write the definition of each, including what is excluded, using the same timestamps the platform uses so the figure can be traced.
- Check the definition against a sample of real records, and confirm the result matches what the team would say about them.
- Decide who reviews each measure and how often, and remove any measure nobody is assigned to review.
The order matters. Starting from the measures available in the platform tends to produce a list shaped by what is easy to calculate. Starting from outcomes produces a shorter list that answers questions people actually ask.
Signs a measure has stopped doing its job
- Teams discuss the number in meetings but do not change anything when it moves.
- The measure improved sharply in the same week a process or category was changed.
- The measure looks healthy while a quality measure beside it is deteriorating.
- Few of the people who see the figure can say how it is calculated.
- Someone has built a private spreadsheet to recalculate it because they do not trust the platform value.
When one of these appears, the first move is to check the definition and the recent data changes, not to set a new target. A target applied to a measure that has been quietly redefined can produce confident conclusions that are wrong.
Questions about indicator choice in ITSM
How many measures should a service desk track?
Enough that each outcome has a speed and a quality measure, and no more than a lead can review in a normal meeting. Long lists are often not reviewed in full, so the extra measures become decoration.
Should we report the same measure to executives and to team leads?
Report the same underlying measure, but at different levels of detail. An executive should see the trend and the headline. A team lead needs the breakdown by queue and the records behind any spike.
Is first contact resolution a fair measure for every desk?
Not always. A desk that routes specialist work by design will show a low figure that reflects its structure, not its performance. Compare it only with desks that have a similar routing model.
What if a measure we need cannot be calculated cleanly?
Say so, and record the gap in the definition. A partial measure with an honest label is more useful than a clean-looking one that omits the cases that matter.
Testing your current indicator list
If your team has a long list of indicators and cannot say which decision each one supports, the fastest improvement is usually a pruning exercise against the worksheet above. Background on how an indicator is defined in the platform is in the explanation of Performance Analytics indicators, and the problem management measures are the place to look for measures on problem work.
Which ITSM Metrics to Start With and How to Define Each Clock
Start with one speed measure and one quality measure for each process you run, and write down the start and stop point of every clock before anyone reads a number. Most arguments about ITSM metrics are not about arithmetic. They come from two teams timing the same work from different moments.
Resolution time sounds like a single measure, but it has at least three honest versions, and each one answers a different question.
| Measure | Clock starts | Clock stops | Question it answers |
|---|---|---|---|
| Customer wait | Record opened | Record resolved | How long the person waited for a fix |
| Team handling time | Record assigned to the current group | Record resolved | How long the group held the work |
| Pending time | Record enters a pending state | Record returns to active work | How much of the wait sat outside the team’s control |
Use resolved rather than closed as the stop point where closure waits on a confirmation step that can run for days, then report closure lag as its own measure. Paused time needs the same discipline. A record waiting on the customer should not count against the desk, but one parked with a vendor for weeks should still be visible somewhere. Keep the list of excluded pending reasons short, because a long exclusion list is the usual way a metric quietly stops meaning anything.
Quality measures need equal care. A reopen rate misses follow-up work logged as a new linked record, so check how reopen work is actually handled before trusting the percentage. A repeat incident rate depends on how the affected item and category were recorded; if one fault is logged under three categories, the rate looks low for the wrong reason. Repeats only come down when they feed into problem management, so review the measure and that process together.
A practical sequence: define each clock in writing, test the definition against twenty or thirty closed records by hand, and compare the result with what the team says happened. Where the two disagree, fix the definition first and only then set targets. Targets belong in the service level design, and the reporting clock must match what the business agreed to.
If the same measures still disagree across teams after this exercise, the cause is usually the reporting setup rather than the sums. A Performance Analytics health check examines that setup and is quicker than settling each disputed figure in a meeting.
Frequently asked questions
How many metrics should we track?
Focus on 5-10 key metrics that matter most to the organisation. Too many metrics dilutes focus and creates reporting burden. Fewer metrics with regular review is more effective than extensive metric tracking.
How do we know if metrics are meaningful?
Ask: does this metric drive important decisions? Does it reflect something about quality or efficiency? Do teams understand what affects this metric and how to improve it? If the metric is just a number with no clear meaning, it might not be worth tracking.
Should we compare metrics between teams?
Comparison can be useful if teams have similar work, but context matters. Compare trends over time rather than absolute values. Use metrics to identify improvement opportunities, not to judge which team is best.
Related guides
Related Oblytech services
Where this topic turns into delivery work, these are the Oblytech services that cover it.
Planning, running or fixing a ServiceNow programme? Tell us where you are and we will suggest a sensible next step.
Contact us